How do I build a CA Cert chain for MQTT Modules

When using a Self-Signed Certificate which was create outside of Ignition, you will need to construct a CA Chain Certificate to be used by the MQTT Modules.

The CA Chain Certificate will comprise of all Intermediate CA certificates and the Root CA concatenated into a single cert file. You can download the source files required by using the Firefox browser.

Using Firefox, make a connection on port 8043 on the Ignition URL. 

You will be warned of a Potential Security Risk. Select Advanced and then select View Certificate.

The browser will show each of the certificates available. Download the files from each of the Intermediate CA and Root CA tabs using the download file link. 

Construct the CA Chain Cert by concatenating these downloaded files into a single new file. 

In this example, we first have the CLS Testing Intermediate CA which is the concatenated with the CLS Root CA

-----BEGIN CERTIFICATE-----
MIIF3TCCA8WgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwgYQxCzAJBgNVBAYTAlVT
......
HPdMojd3CnsdLcqfzt582nxlGbfYwpR3Y5XeMSHST2Wq1FLVLA3HE5iLtQAL0bwv
NfKkNSLtui2QpCV0dwY8XX8=
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIF8DCCA9igAwIBAgIJAK7yLN2Y9PrMMA0GCSqGSIb3DQEBCwUAMIGEMQswCQYD
.....
CRTeBexRtq4VSm/Oi5fIT+euBLZTTsDdF+sxzJi9TP60Y0tD
-----END CERTIFICATE-----